TYPE DE FAIBLESSE
CWE-1295
13 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-1295 (en anglais) →
CVE-2025-59109Les claviers à code Dormakaba 9002 sont affectés par une faille matérielle : les pressions sur les touches sont transmises en texte clair via un connecteur UART exposé à l'arrière …
5.1 MOYENNE
CVE-2025-46775A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, F…
5.5 MOYENNE
CVE-2025-12910Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium secu…
6.2 MOYENNE
CVE-2025-35031Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, …
4.6 MOYENNE
CVE-2025-42604This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unaut…
6.9 MOYENNE
CVE-2025-2877A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when …
6.5 MOYENNE
CVE-2024-11217A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options.
4.9 MOYENNE
CVE-2024-27179Admin cookies are written in clear-text in logs. An attacker can retrieve them and bypass the authentication mechanism. As for the affected products/models/versions, see the refere…
4.7 MOYENNE
CVE-2023-28077
Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive in…
4.4 MOYENNE
CVE-2023-4215Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.
6.5 MOYENNE
CVE-2022-34364
Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing sensitive information …
4.4 MOYENNE
CVE-2021-25476An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.
4.1 MOYENNE
CVE-2021-31412Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaad…
5.3 MOYENNE